Cyber Assurance Manager

About the role

The Cyber Assurance Manager provides cyber assurance through security assessments so that Income's systems remain secure, with weaknesses and exposures mitigated or remediated in line with the organisation's risk appetite. The role reports to the Head of Information Technology Risk & Security (ITRS).

Key responsibilities

• Manage a vulnerability management programme covering ongoing vulnerability and configuration scanning, penetration testing, vulnerability disclosure and software security assessment.
• Manage a cyber threat intelligence programme collecting and analysing information on threats, threat actors, vulnerabilities and attack methods.
• Manage an offensive programme including breach and attack simulation, cyber range, red teaming and incident response exercises.
• Manage risk assessment and treatment of discovered vulnerabilities by assessing impact, control effectiveness and risk exposure.
• Act as a Security Architect, advising on security requirements and ensuring conformance to security architecture.
• Stay up to date with new technologies, industry trends and regulatory requirements, and advise on the controls needed to protect infrastructure and applications.

Required profile

• Degree in Computer Science, Information Technology, Information Systems or equivalent.
• More than 7 years of experience in technology, information or cyber risk management, or information security within financial services.
• Security certifications such as CISSP, CCSP, CISM, OSCP or TOGAF.
• Experience leading threat exposure management or security architecture review activities.

Required skills

• Continuous Threat Exposure Management and engineering of data and system integration for automated prioritisation.
• Familiarity with cloud technologies and their security and risk management frameworks.
• Knowledge of MAS Technology Risk Management and MAS Cyber Hygiene, CSA and PDPA, and CIS, NIST, OWASP and TOGAFF standards.
• Experience with exposure management platforms such as Tenable, Qualys or Rapid7.